SQL Injection Vulnerability in ZZCMS 2023 Affects Keyword Filtering Component

CVE-2024-11242

What is CVE-2024-11242?

A serious SQL injection vulnerability has been identified in the ZZCMS 2023 version, specifically impacting the functionality within the file /admin/ad_list.php?action=pass of the Keyword Filtering component. The flaw arises from improper handling of user input in the 'keyword' parameter, allowing attackers to execute arbitrary SQL commands against the underlying database. This vulnerability can be exploited remotely, thereby posing a significant risk to the integrity and confidentiality of the data managed by the affected application. It is essential for users of ZZCMS 2023 to apply necessary patches and monitor for any suspicious activity that could be indicative of exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References